Bytium®
Security-first

Privacy Notice

Last updated: 2025-02-02

This notice explains how Bytium LLC (“Bytium”, “we”) handles personal data on our public website and in the Bytium client portal. We process only what is necessary to provide our services, secure our systems, and comply with our obligations.

What we collect

  • Public site: contact details and context you submit (e.g., name, email, company, security needs); consent choices; minimal technical data (IP address, user agent, timestamps) for security and abuse prevention.
  • Client portal: account/profile data, authentication logs, role/permissions data, project/workspace content you or your organization upload, and activity/audit logs.
  • Cookies and similar tech: essential cookies for site and portal operation; non-essential analytics only if you consent (see Cookies & Consent).

Why we process data

  • Service delivery and support (contract/legitimate interest): operate the portal, respond to requests, provide updates.
  • Security and abuse prevention (legitimate interest): authentication, rate limiting, fraud/abuse detection, audit logging.
  • Analytics (consent): understand site usage to improve the experience (non-essential and opt-in).
  • Legal/compliance (legal obligation/legitimate interest): maintain records required by law or to establish/defend legal claims.

Sharing and processors

We do not sell personal data. We use trusted processors for hosting/CDN, email/support, and optional analytics. These vendors act under our instructions and agreements that include data protection terms.

Retention

  • Public inquiries: kept only as long as needed to respond and for limited business records (typically up to 12–24 months).
  • Portal data: retained while the account is active and deleted or archived per customer instructions after termination; selected audit/authentication logs may be retained for a defined period (e.g., 90–180 days) for security and compliance.

International transfers

We provide services globally (including the EU/EEA, US, Canada, and Australia). If personal data is processed outside your region, we use appropriate safeguards—such as Standard Contractual Clauses (SCCs) or equivalent protections—where required by law.

Cookies & Consent

Essential cookies run for core functionality. Non-essential analytics are off by default and only enabled if you consent via the banner. You can change your choice anytime by reopening the banner (clear “cookie-consent” in your browser or use the Manage option when shown).

Your rights

Where applicable, you may have rights to access, rectify, erase, restrict, object, or port your data, and to withdraw consent for non-essential processing. To exercise your rights, contact us using the details below. We respond within required timeframes.

Contact

Privacy inquiries and requests: [email protected] or submit a privacy request.

Updates

We may update this notice. The “last updated” date will reflect the latest version.